| Previous | Next |
| STATUS_TPM_TOOMANYCONTEXTS | STATUS_TPM_MA_DESTINATION |
STATUS_TPM_MA_TICKET_SIGNATURE
The migration authority ticket signature is invalid
STATUS_TPM_MA_TICKET_SIGNATURE belongs to TPM 1.2 migration-authority handling, especially certified migratable key flows. The TPM rejected the signature on a migration-authority ticket.
This is a trust-path problem for key migration, not a general key-load failure. The migration ticket may have been signed by the wrong authority, modified after signing, or paired with the wrong key/migration destination.
For investigation, preserve the ticket, signing authority identity, source key information, and destination information. Retrying the same ticket will not help unless the validation input changes.
Diagnostic focus
- Verify the migration authority public key and certificate chain used by the caller.
- Check that the ticket is for the same key and migration destination.
- Look for byte-order or hashing mismatches in ticket construction.
References
- TCG: TPM 1.2 Main Specification
- TCG: TPM 1.2 Part 1 Design Principles
- TCG: TPM 1.2 Part 2 Structures of the TPM
- TCG: TPM 1.2 Part 3 Commands
- Microsoft: TPM Base Services
- Microsoft: MS-ERREF NTSTATUS values
Looking for a different code? Search another status or error code.